Add machines from your tailnet

How to set this up

1. Create an API key on your control plane. For Headscale, run this on the server. For Tailscale, Vantage reads the list from the Tailscale app on this Mac, so no key is needed.

   headscale apikeys create --expiration 1h

2. Paste the control plane's address and the key, then press List nodes. The key is used once and never stored.
3. Tick the machines you want. A machine tagged "needs sudo password" is left unticked; add it with "A server I can SSH into", which takes the password.
4. Choose Server or Laptop for each ticked machine.
5. Press Install. Vantage copies the agent over SSH, starts it as a service, pairs with it and pins its certificate.

Something not working?

• The list is empty: check that Tailscale is running on this Mac, or that the Headscale address and key are right.
• A machine says it could not be checked over ssh: it needs the SSH key set up as on the SSH way. Add it there to see the exact fix.
• A machine says offline: it is off the tailnet right now. Turn it on and press List again.
• The Mac has not given Vantage permission to reach the local network: System Settings > Privacy & Security > Local Network, switch Vantage on, then press List again.